The Top 5 Russian Cyber Threat Actors to Watch

This post was updated on March 10, 2022 to include a section on the Conti Ransomware Group. As we continue to monitor the situation between Russia and Ukraine – and the potential for global cybersecurity impacts – we realize that our customers and other business and industry stakeholders may be...

Mageia: Security Advisory (MGASA-2019-0056)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0056)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0056)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : openssl (RHSA-2021:0056)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0056 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

Iranian targeting of IT sector on the rise

Iranian threat actors are increasing attacks against IT services companies as a way to access their customers’ networks. This activity is notable because targeting third parties has the potential to exploit more sensitive organizations by taking advantage of trust and access in a supply chain...

CVE-2021-0056

creationtimestamp| type| source ---|---|--- 2021-06-10 02:56:48+00:00| published-proof-of-concept| Telegram/AbsyJs2Q6hViYdjhAJhQIWSrmL9-uzmGE8kRz6xzv-qN1N0...

CVE-2021-0056

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0056

CVE-2021-0056 affects Intel® NUC M15 Laptop Kit Driver Pack prior to version 1.1. The issue is insecure inherited permissions in the Driver Pack software that may allow an authenticated user to escalate privileges via local access. Intel and RH Red Hat advisories confirm the affected product and ...

Intel® NUC M15 Laptop Kit Driver Pack Advisory

Summary: Potential security vulnerabilities in some Intel® NUC M15 Laptop Kit Driver Packs may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0056 Description: Insecure inherited permissions fo...

XENMEM_aquire_resources Error Path DoS (XSA-334)

A denial of service DoS vulnerability exists in Xen servers XENMEMacquireresource due to an error path exiting without releasing an RCU Read, Copy, Update reference. An authenticated, local attacker can exploit this issue, via a malicious HVM stubdomain which can cause an RCU reference to be...

NewStart CGSL CORE 5.04 / MAIN 5.04 : taglib Vulnerability (NS-SA-2020-0056)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has taglib packages installed that are affected by a vulnerability: - The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer...

CVE-2020-0056

In btuhcifconnectioncompevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0056

CVE-2020-0056 is an Android 10 vulnerability affecting the btu_hcif_connection_comp_evt function in btu_hcif.cc, where a missing bounds check can trigger an out-of-bounds read. This may lead to local information disclosure without requiring privileges or user interaction. The issue is documented ...

CVE-2019-0056

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0056

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0056

Juniper Networks Junos OS on MX480/MX960/MX2008/MX2010/MX2020 is affected by CVE-2019-0056. The vulnerability is an Insufficient Resource Pool in OSPF that lets an attacker drive OSPF states to Down, causing a DoS affecting all IPv4/IPv6 traffic routed by OSPF. Exploitation requires a high rate o...

Juniper Junos CVE-2019-0056 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 18.1 Juniper Junos 18.1R1 Juniper Junos 18.1R2 Juniper Junos 18.1R2-S1 Juniper Junos 18.1R2-S2 Juniper Junos...

CVE-2018-0056

The CVE describes an issue in Juniper Networks Junos OS on MX Series devices with l2-backhaul VPN configured. The Layer 2 Address Learning Daemon (L2ALD) may crash when deleting a duplicate MAC address learned on two different interfaces if the entry is not found in the internal MAC address table...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:0056-1) (Spectre)

This update for qemu fixes the following issues: A mitigation for a security flaw has been applied : - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. bsc1068032...